DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
074b117f389f150edda1e90109dd10a5.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
074b117f389f150edda1e90109dd10a5.dll
Resource
win10v2004-20231215-en
Target
074b117f389f150edda1e90109dd10a5
Size
87KB
MD5
074b117f389f150edda1e90109dd10a5
SHA1
d4aced1e6d88ef1b9645adfbedfa2f46d28e6f5e
SHA256
82bf23f41b36380f92b2d96628a2ad2ca99ed608e7b672128d7e92acf2d86d22
SHA512
3d4d08af361a485e7232f9beefa650b68d2cb279c38464cfca34c2605dc0e61b69f241d869da5b6286581fa08e22cd975e9d1ee91801cf9e87d4820164c670c4
SSDEEP
1536:8ljDGyOyC6i0I9sEmBGEt3NYhHsz4rbaZo5lXoUn/Bn8xg5iWqUPmNDQhRRTGjbG:8dVOuDREmIg9Y9szUbt//B8xd9xqEjbG
Checks for missing Authenticode signature.
resource |
---|
074b117f389f150edda1e90109dd10a5 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE